Threats tagged 'bit-gitlab-2026-112378'

A vulnerability in GitLab Enterprise Edition versions from 17.8 up to but not including 19.3.6, 19.4 up to but not including 19.4.3, and 19.5 up to but not including 19.5.1 allowed authenticated users to access paid AI features without a valid subscription. This was due to insufficient server-side validation in billing eligibility checks. The issue has been fixed in versions 19.3.6, 19.4.3, and 19.5.1.